This Privacy Policy explains how Little Carved LLC (“we”, “us”) collects, uses, and protects information when you use Gety (the “Service”). Our goal is to do as little with your data as possible — and to be honest about what we do.
Local-First by Design
Gety indexes and searches files entirely on your device. We do not upload, store, or have access to:
- Your file contents
- Your file names
- Your file paths
- Your search queries
Indexing and search happen on your machine. We do not see what you search for or what files you have. This is the core of how Gety works, not a setting you have to enable.
What We Collect
Account Information
If you create an account, we collect your email address, display name (if provided), and any other information you choose to add. We use this to provide the Service, to send important transactional emails, and to support you when you contact us.
Sign-in through third parties (optional). As an alternative to email-based sign-up, you can choose to sign in to Gety through a third-party identity provider such as Google. If you do, we receive limited profile information from that provider — typically your email address, display name, and profile picture (avatar). We use this information solely to create and maintain your Gety account. We do not request or access any other data on the third-party service. You can revoke our access at any time through your account settings on that service.
Communication Records
When you contact us by email or other support channels, we keep a record of the messages you send and our responses. We use these to help with your request and to improve our support over time.
Payment Information
When you purchase a paid plan, payment is processed by Stripe. We do not see or store your credit card details. Stripe shares with us limited information such as your billing country, the amount paid, and a transaction ID, which we use to manage subscriptions and handle refunds.
Website Analytics
Our website (gety.ai) uses Plausible Analytics, a privacy-friendly, GDPR-compliant analytics tool. Plausible does not use cookies and does not collect personal data, which is why we do not need to show a cookie consent banner. It tracks aggregated metrics such as pageviews, country (derived from IP address but not stored), and referrer source. You can read Plausible’s data policy at plausible.io/data-policy.
Product Analytics
To understand how Gety is used and where to improve it, the desktop application sends usage events to PostHog, our product analytics provider. These events describe interactions with the app — for example, which features are opened, the duration of a session, or the version of Gety you are running. Events are associated with your account so we can understand how Gety is used over time.
Product analytics events do not contain your file contents, file names, file paths, search queries, AI conversation content, or any other sensitive data. We use them only to improve the Service. You can request that we stop processing your analytics data by contacting hi@gety.ai.
Diagnostics and Crash Reports
Gety collects crash reports and basic diagnostic information (such as the operating system version and the version of Gety you are running) using Sentry, an error tracking system. These reports help us identify and fix bugs. They may include stack traces, error messages, the application state at the time of the error, and a small amount of context about what action led to the error.
Crash reports do not include your file contents, file names, file paths, search queries, AI conversation content, or any other content that you have indexed.
Communications
If you subscribe to our newsletter, we send your email address to Brevo, our email service provider, who stores it on our behalf. We may use this address to send you product updates, announcements, and offers. You can unsubscribe at any time using the link in any newsletter email.
Separately from marketing emails, we may send you transactional messages such as receipts, account notifications, security alerts, and other communications necessary to operate the Service. You cannot opt out of transactional messages because they are required to provide the Service to you.
What We Don’t Collect
To be explicit: we do not collect, store, or have access to:
- The contents of your files
- The names or paths of your files
- What you search for in Gety
- File content delivered to AI tools you authorize on your device, or the responses those tools generate (Gety serves these requests locally and does not store, log, or retain them on our servers)
- Browsing history outside of our website
- Tracking cookies of any kind
How We Use Your Information
We use the limited information we collect to:
- Provide and maintain the Service
- Process payments and manage subscriptions
- Send transactional emails (receipts, account notices, important updates)
- Respond to support requests
- Improve the Service through aggregated analytics, product analytics, and crash reports
- Detect and prevent fraud or abuse
- Comply with legal obligations
We do not sell your personal information. We do not share your information with advertisers. We do not use your data to train AI models.
How We Share Information
We share personal data only in the following circumstances:
Service providers
We work with a small number of trusted third parties who help us operate the Service. Each is bound by its own privacy policy and by contractual obligations to handle data on our behalf:
- Stripe — payment processing
- Plausible Analytics — privacy-friendly website analytics
- PostHog — product analytics for the desktop application
- Brevo — email newsletter delivery
- Discord — community platform, when you choose to join our server
- Sentry — error tracking and crash reporting
Legal compliance
We may disclose information when required by law, regulation, court order, subpoena, or other legal process, or when we have a good-faith belief that disclosure is necessary to comply with such requirements.
Business transfers
If Little Carved LLC is involved in a merger, acquisition, sale of assets, or similar business transaction, your information may be transferred to the successor entity, subject to the same protections set out in this Privacy Policy.
Protection of rights and safety
We may share information when we believe in good faith that doing so is necessary to enforce our Terms, to protect the rights, property, or safety of Little Carved LLC, our users, or others, or to detect, prevent, or address fraud, security, or technical issues.
AI providers (such as Anthropic, OpenAI) are not service providers we share data with. See “AI Integration and Your Data” below for how Gety works with AI tools.
AI Integration and Your Data
Gety exposes a local interface that other software running on your device — such as Claude, Cursor, ChatGPT, or any MCP-compatible client — can use to read content from your indexed files. When you grant such a tool access to Gety, it can request content from your files (excerpts, full documents, pages, or other extracts).
Gety itself does not send your data to any AI provider, does not hold API keys for AI providers, does not act as a proxy, and does not store, log, or retain the content of these requests on our servers. Once content leaves Gety to a tool you have authorized, what that tool does with it — including whether it forwards the content to its own AI provider — is governed by that tool’s privacy practices, not ours.
Gety does not use your file content to train AI models or for any purpose other than serving the request you initiated.
Cookies
Our website does not use tracking cookies. We may use a small number of essential local storage values for things like remembering your dark-mode preference. These do not track you across sites.
Data Retention
We retain different categories of data for different periods:
- Account information — until you delete your account. Upon deletion, we remove or anonymize your personal data within 30 days, except where retention is required by law.
- Billing and payment records — up to seven (7) years after the transaction, to comply with applicable tax and accounting laws.
- Newsletter subscription — until you unsubscribe.
- Communication records (support emails) — up to two (2) years after the conversation closes.
- Product analytics events (PostHog) — up to twelve (12) months, then deleted.
- Crash reports and diagnostics (Sentry) — up to twelve (12) months, then deleted.
- Website analytics (Plausible) — aggregated metrics retained indefinitely; no individual user records.
Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct information that is inaccurate or incomplete
- Delete your personal data (the “right to be forgotten”)
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent where we rely on consent
- Opt out of any sale of personal information (note: we do not sell personal information)
To exercise any of these rights, email us at hi@gety.ai. We will respond within 30 days.
Identity verification. Before responding to a data subject request, we may need to verify your identity to make sure we are not disclosing or deleting data at the request of someone else. We will only ask for the minimum information needed to confirm who you are.
United States. If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, correct, and opt out of sale or sharing. We do not sell personal information. If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, or another US state with a comprehensive privacy law, you have similar rights and can exercise them by contacting us at hi@gety.ai.
European Users (GDPR)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent UK and Swiss laws apply to our processing of your personal data.
Data controller. Little Carved LLC is the data controller for the personal data we collect about you. You can reach us at hi@gety.ai.
Legal bases for processing. We process your personal data on the following legal bases:
- Performance of a contract — to provide you with the Service, manage your account, and process payments.
- Our legitimate interests — to improve the Service, prevent fraud and abuse, and ensure security.
- Your consent — for example, when you subscribe to our newsletter. You can withdraw consent at any time.
- Compliance with legal obligations — to keep records required by tax or other applicable laws.
Your rights under GDPR. In addition to the rights listed above, you have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in accordance with the law.
International transfers. Where we transfer personal data outside the EEA, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or transfers to countries with an adequacy decision.
International Data Transfers
We are based in the United States. If you use Gety from outside the US, please be aware that the limited data we collect may be processed in the US or in any country where our service providers operate. By using Gety, you consent to such transfers.
Children’s Privacy
Gety is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
Security
We take reasonable steps to protect the limited information we hold, including:
- Encryption in transit (HTTPS / TLS) for data exchanged with our servers.
- Access controls and authentication for systems that hold personal data.
- Data minimization — we collect only what we need.
- Regular review of our infrastructure and dependencies.
Internal access. Access to personal data is restricted to authorized members of our team who need it to operate the Service, provide customer support, or comply with legal obligations. All team members are bound by confidentiality obligations.
No system is perfectly secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify users by email or by posting a notice on our website. The date at the top of this page reflects the latest revision.
Contact
If you have any questions about this Privacy Policy or our data practices, please contact us at hi@gety.ai.
Little Carved LLC